CyberHappenings logo

Track cybersecurity events as they unfold. Sourced timelines, daily updates. Fast, privacy‑respecting. No ads, no tracking.

Colt Technology Services Experiences Cyber Incident and Service Disruptions

First reported
Last updated
1 unique sources, 1 articles

Summary

Hide ▲

Colt Technology Services, a UK-based telecommunications company, has confirmed a cyber incident affecting its internal systems and customer services. The incident has led to disruptions in the Colt Online Platform and Voice API platform, impacting customer support and network monitoring capabilities. The company is working with third-party cyber experts to restore services. A threat actor claiming affiliation with the WarLock ransomware gang has taken responsibility and is offering to sell allegedly stolen documents. The incident began on August 12, with Colt acknowledging service disruptions and later confirming a cyber incident on August 14. The company has taken protective measures, including taking some systems offline, which has further disrupted support services. Colt is working to restore automated monitoring capabilities and is advising customers to use email or phone for support, with potential delays. The threat actor, known as 'cnkjasdfgd,' claims to have stolen 1 million documents, including financial, employee, and customer information, and is offering to sell this data for $200,000. Colt has not yet confirmed these claims.

Timeline

  1. 15.08.2025 21:12 1 articles · 1mo ago

    Colt Technology Services Confirms Cyber Incident and Service Disruptions

    On August 12, Colt Technology Services acknowledged service disruptions affecting the Colt Online Platform and Voice API platform. On August 14, the company confirmed a cyber incident on an internal system, separate from customer infrastructure. The incident has led to disruptions in support services, with the company working to restore automated monitoring capabilities. A threat actor claiming affiliation with the WarLock ransomware gang has taken responsibility and is offering to sell allegedly stolen documents.

    Show sources

Information Snippets

  • Colt Technology Services experienced service disruptions starting on August 12, affecting the Colt Online Platform and Voice API platform.

    First reported: 15.08.2025 21:12
    1 source, 1 article
    Show sources
  • The company confirmed a cyber incident on an internal system on August 14, separate from customer infrastructure.

    First reported: 15.08.2025 21:12
    1 source, 1 article
    Show sources
  • Colt took protective measures, including taking some systems offline, which led to further disruptions in support services.

    First reported: 15.08.2025 21:12
    1 source, 1 article
    Show sources
  • The company is working with third-party cyber experts to restore affected systems and monitor customer networks manually.

    First reported: 15.08.2025 21:12
    1 source, 1 article
    Show sources
  • A threat actor, 'cnkjasdfgd,' claiming affiliation with the WarLock ransomware gang, has taken responsibility for the attack.

    First reported: 15.08.2025 21:12
    1 source, 1 article
    Show sources
  • The threat actor is offering to sell 1 million allegedly stolen documents, including financial, employee, and customer information, for $200,000.

    First reported: 15.08.2025 21:12
    1 source, 1 article
    Show sources
  • Colt has not yet confirmed the claims made by the threat actor or disclosed details about the nature of the cyber incident.

    First reported: 15.08.2025 21:12
    1 source, 1 article
    Show sources

Similar Happenings

Warlock Ransomware Exploits Vulnerable SharePoint Servers

Warlock ransomware, potentially linked to Black Basta, targets unpatched on-premises Microsoft SharePoint servers. The ransomware leverages multiple vulnerabilities (CVE-2025-49706, CVE-2025-49704, CVE-2025-53770, CVE-2025-53771) to gain initial access, escalate privileges, and deploy ransomware. The campaign includes extensive reconnaissance and evasion techniques, targeting security software to avoid detection. The threat actor Storm-2603, associated with China-backed groups, has been observed using Warlock ransomware in these attacks. The ransomware gang recently auctioned files stolen from Colt Technology Services, confirming customer data was compromised. Organizations are urged to apply available patches and implement comprehensive security measures to mitigate the risk.